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Abstract 

Using algebraic geometry codes we give a polynomial construction of 
quantum codes with asymptotically non-zero rate and relative dis- 
tance. 



1 Introduction 

Let B = C 2 , an element of B is called a qubit. The space B n = B® n = (C 2 )® n 
is the space of quantum words of length n. An ((n,K)) quantum code Q is 
a A"- dimensional linear subspace of B n . The parameters n and K are called 
the length and the size (or cardinality) of the code. 

Let ~L(B n ) be the space of linear operators on B n . A quantum information 
message is a vector w G Q. The message w can be altered by a linear operator 
E G L(£> n ), called an error operator. 

Let us define the set Supp-E C [l,n] in the following way. Consider the 
action of E on B n . If E can be written as Idj <%) E', where Idj is the identity 
operator acting on the j-th tensor component and E' an operator on the 
tensor product of the other components, then j ^ Supp-E. The weight of E 
is defined as wt(E) = \SxvppE\. 
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We say that E is detectable by Q if for any two v, u G Q if v _L u then 
v _L E(u). Let d,Q be the maximum integer such that Q can detect any error 
of weight (1q — 1 or less; g?q is called the minimum distance of Q. We say 
that Q is an ((n, if, dq))-code. It can be proved that the code Q can correct 
any error of weight [ dQ 2 ~ 1 j or less. 

Remark One can find a more details discussion of the notions of quantum 
minimum distance, quantum detection, and quantum correction in [[|, 

0. 13. 

Probably the most interesting and important class of quantum codes are 
quantum stabilizer codes. These codes can be viewed as natural analogues of 
classical linear codes. To define a quantum stabilizer code we first introduce 
another class of (non-quantum) codes. 

Let T = F4. The non-trivial automorphism of F4 over F2 is called com- 
plex conjugation and denoted in the same way. We fix a (symplectic) form 
on T n given by u>(x,y) = Tr(xy). There is a usual F4 Hamming norm on 
T n . A small symplectic code F C T n is an anisotropic F2-subspace in T n , 

1. e., u(x,y) = for any x,y G F. Its minimal distance d — dp is defined as 
the minimum F 4 Hamming norm of a non-trivial vector in F. Its dimension 
k = hp is its F 2 -dimension, in particular, k < n. The cu-dual F w of a small 
symplectic code F is called a large symplectic code, for a large symplectic 
code we have n < kp^ < 2n. Of course, F C F u . 

Let F C T n be a small symplectic code with parameters [n, k, d}. We are 
going to define the standard stabilizer code Qp C B n corresponding to F. 
Let F 4 = {0,1, e,e}. Set 
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These are the usual Pauli matrices. Then, for t = (t\, . . . , t n ) e T n we put 

a(t) = cr(ti) ® . . . ® a{t n ). (1) 

We get a map (of sets) a :T n — > L(i3 n ). Being restricted to a small symplec- 
tic code F G T ra , the map a happens to be almost a group homomorphism, 
namely for fx , f 2 G F we have 

*(/iM/a) = ^(/a)^(/i) = ±^(/i + /a), 
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in particular o~(fi) and cr{f2) commute. This makes it possible to consider 
the subspace of B n fixed by u(F) in the following way. Let T = {fi, . . . , fk} 
be an F 2 -basis of F and let /i = {/ii, . . . , /i^}, fa G {±1}. 
Define Qr,^ as follows 

Qr,n = {x E B n | cr(fi)(x) = fax for any i = l,...,k}. 

The quantum code Qr,^ is called a stabilizer code. For any f £ F the 
operator cx(/) acts on Qr,n as ±1- 



The small symplectic code F being fixed, we get 2 different codes Qjr 



A'' 



Their properties, we are interested in, do not depend on the choice of T and 
/i, and by abuse of notation we call each of them Qp. 

The main theorem on stabilizer codes says that the parameters of the 
obtained quantum codes are 

K QF = T~ k - ,d QF = min H/ll >d F ». (2) 

Remark Detailed descriptions of quantum stabilizer codes including the 
proof of the above statements on their parameters can be found in 0, [|TT|1 , 

0, 0, 0- 

Let Icq = log 2 Kq and set 

r> k Q i r d Q 

Rq = — and d Q = — . 

n " n 

We are interested in 

R(5) = limsup Rq, 

n—*oo 

where the limit is taken over all codes with Sq > 5. 

The best known nonconstructive lower bound on R(5) was obtained in || 
via codes over F 4 : 

R{6) > 1 -S\og 2 3-H(6), (3) 

where H(x) = —x log 2 x — (1 — x) log 2 (l — x) is the binary entropy function. 
For upper bounds see |§. 

Several methods were proposed to construct quantum codes, see, e.g. [|], 
[1, 1, 1, 0, El, 13, 0, II, & However, when n grows for a fixed 
R > 0, the relative minimum distance 5 of all these codes tends to zero. 
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In this paper we give a (polynomial in n) construction of quantum codes 
from algebraic geometry codes, so that in a certain interval of rates R the 
relative minimum distance of these quantum codes is separated from zero, 
i.e., we construct a family of asymptotically good quantum codes. 

The construction proceeds in four steps. Algebraic curves give us asymp- 
totically good nonbinary algebraic geometry codes, and we provide that each 
of them contains its dual. Then we take a binary symbolwise expansion in 
a self-dual basis of the codewords of these algebraic geometry codes, so that 
the resulting binary codes also contain their duals. Then we plug these codes 
into Steane's construction |2(J to construct good symplectic codes. The cor- 



responding quantum codes are asymptotically good. 

To make the exposition simpler, we follow this path backwards. We have 
already explained how quantum codes are related to symplectic codes. In 
Section ^| we recall Steane's construction of symplectic codes starting from 
triples D' D D D D x of binary codes. Section [3] explains how to construct 
binary codes containing there duals from codes over F2™ with the same prop- 
erty. In Section f| we produce necessary algebraic geometry codes. Finally, 
in Section | we sum up to get the parameters. Here is the result (see Fig.l). 

Theorem 1 For any 5 G (0, ^) and R lying on the broken line given by the 
piecewise linear function 

2 10 

where m = 3, 4, 5, . . .; 5 2 = yg and 

3 2 m 

S m = —-. — r for m — 3, 4, 5, ... , 

5 (2 m - 2)(2 m+1 - 2) 

there exist polynomially constructible families of quantum codes with n — > oo 
and asymptotic parameters greater than or equal to (5, R) . 



2 From binary codes to symplectic codes 



We follow Steane's construction [20[] with improved estimates on the param- 
eters given by by Cohen, Encheva and Litsyn H. 
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We start with a triple D' D D D D -1 of binary codes, where D is an 
[n, k, d]-code containing its dual D- 1 , and D 1 a larger [n, fc']-code with k' > 
k + 2. Let G be a generator matrix of Z?, and let G' be such a matrix that 




is a generator matrix of D'. Denote by d' 2 the second generalized weight 
of D', i.e., the minimum weight of the bitwise OR of two different nonzero 



codewords (see [g], ||, [p2| , f23fl for properties and known bounds). Form 
the code C C F 2 n with the generator matrix 




where the matrix G" is obtained from G' by permuting its rows so that no 
row stays on its place. 

Fix the following F 2 -linear isomorphism between F 2 n and F 4 first map- 
ping (x 1 ,...,x n ,y 1 ,..., y n ) G Fj n to ((x 1 , y ± ), (x n , y n )) E (F|) n and then 
identifying F\ and F 4 by (0, 0) = 0, (0, 1) = e, (1, 0) = e, (1, 1) = 1. The 
image of C under this map is F C FJ. Here is an estimate for its parameters 



Theorem 2 TTie code F C is a /ar^e symplectic code, i.e., F D Jfo 
parameters are kp = k + k! and dp > min (d, d' 2 ). 

Proof Let x = (ai, . . . , a n , 6i, . . . , b n ) and x' = (a[, . . . , a' n , b[, . . . , b' n ). 
We choose the above identification between F 4 and F 2 n . In the basis of F 2 n 
the form u(x,x') is given by uj(x,x') = J2j=i,...,n a jb'j + a'jbj- Then suppose 
that x G This means that u(x, x') = for any x' G F. In particular, 
this is true for x' = (a[, . . . , a' n , 0, . . . , 0) and x' = (0, . . . , 0, b[, . . . , b' n ). We 
get J2j=i,..., n a jb'j = for any (b[, . . . , b' n ) G D, and therefore (ai, . . . , a n ) G 
C D. Analogously, {b\, . . . , b n ) G D 1 - C D, and we see that x E F. 

The value of kp is obvious. Then we have to estimate dp. Let x E F. 
Then 



(ai, . . . ,a n ,0, . . . ,0) + (0, . . . ,0,6i, . . . , 
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where (ai,...,a n ) G D, (bi, . . . , b n ) G D, and (a[, . . . , a' n , b[, . . . , b' n ) G D'. If 
the last summand is zero, the number of non-zero pairs (oj, bj) is at least d. 
If it is non-zero, then both (a\ + a[, . . . , a n + a' n ) and (61 + b[, . . . , b n + b' n ) lie 
in D' and they are different since two generators of D' not lying in D cannot 
differ by an element of D. Hence, the F 4 -weight of the sum is at least d' 2 . □ 

Corollary 1 The parameters of the corresponding quantum stabilizer code 
Qf satisfy 

kQ F = k + k' — n, , dQ F > min (d, d' 2 ) > min ^d, T^d'^J . 

Proof By fl2|) the dimension kQ F = n — kp^ = n — (2n — k F ) = k + k 1 — n. 
The first inequality is also that of (fj). 

To prove that d' 2 > Irf' write two different vectors one below the other. 
Let the number of columns (0,0), (0,1), (1,0), (1,1) equal, respectively, a\, 
a 2 , CI3, 04. Then dl 2 = 0,2+03+04. The weight of the first vector is 03+04 > d', 
of the second a 2 + 04 > d', and of their sum a 2 + a 3 > d! . Summing up we 
get the result. □ 

To apply this construction one needs good binary codes with D ± C D. 



3 From non-binary to binary codes 



The following theorem is due to T.Kasami an S.Lin [12 



Theorem 3 Let C be a code and C ± C C . Let an, i — 1, . . . , m be 

a self-dual basis ofF 2 m overF 2 , i.e., 

Tr^aiOij) = 5ij. 

Let D and D be codes obtained by the symbolwise binary expansion of codes 
C and C in the basis «j. Then D C D and D is the binary dual of D. 

Proof The first statement is obvious. 

Let us prove the second one. Let x = (x\, x 2 , ■ ■ • , x n ) G C and y = 
(yi,V2, ■ ■ -,Vn) e C ± . Let 

m 

\ - (J) 
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Vj = E V: 



U) 



0(4 . 



1=1 



Then 



Hence 



E = xy = 



= Tr ( E 



(n m m 
3=1 »=i t=i 

j=l 1=1 t=l 

„00„,(i) 



i=i i=i 

So we have proved that (D) 1 - D D- 1 . It rests to remark that the dimensions 
of D and D 1 - are complimentary. □ 
Of course, if we start from a triple C D C D C L of codes over F2™ the 
same descent gives us a triple D' D -D D D 1 - of binary codes. 

4 From algebraic curves to codes 

In this section we follow standard algebraic geometry constructions presented 
in [^l|], proving that they satisfy some extra properties needed to use them 
in above constructions. Namely, we want a triple C D C D C 1 - of codes over 
F 2 m with good parameters. Let us start from looking for algebraic codes 
containing their duals. 

Let w e (F*) n . For a code C C FJ we define 

Cj; = [x E F™ : ]T WiXiVi = for any y E C) . 

Let X be a (smooth projective geometrically irreducible algebraic) curve 
of genus g defined over F q , let T> be an effective divisor of degree a and 
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V' = {Pi, . . . , P n ,} C X (Fg) a set of F^-points such that Supp£> n P' = 0; 
we set P' = Pi + . . . + P n /. As usual, 

L(D) = {/6F,(I):(/) + D>0}U{0} 

is the space of functions associated to the divisor, and 

il (V) = {u e F q (X) : (w) + V > 0} U {0} 

that of differential forms. 

Suppose that a < y + § — 1, then for any effective divisor £ of degree 
deg£ = n' + g — 2 — 2a we have deg (K + P' — 2V — £) = g and by the 
Riemann-Roch theorem there exists an uo e (P' — 2"D — £ ). Unfortunately, 
working over a finite field, we cannot guarantee that u actually has poles at 
all points of V . However, the set of poles V = {Pi, . . . , P n } C V' consists of 
n > n' - g points. Put P = Pi + . . . + P n . Of course, u e £1 (P - 2V - £). 
Let w = (Resp 1 (cu) , . . . , Resp n (co)). 

The algebraic geometry code Cl (X,V,V) is defined as the image of the 
evaluation map 

L(V) — FJ, 

/ ^ (/(Pi),...,/(P n )). 

Put C = Cl (X, D, V)^. For any two functions f,g & L(V) we have 
fgu E Q(P). Therefore fguo has no poles except in P and, by the residue 
formula, Wif (Pi) 9 (P) = 2 Res^ (u) = 0. We have proved that C D C^. 

If q = 2 m , any element of F q is a square, in particular, Wi = vf. Let g v be 
coordinatewise multiplication by v — (v±, . . . , i> n ). Then the code C" = ^ (C) 
has the property C" 2 C /J -. 

Recall that if a > 2g — 1, the parameters of C and C are 

= n — a + g — 1, 
d > a-2g + 2. 

Summing up, we have proved 

Theorem 4 // there exists a curve over F q of genus g with at least n' > 4g 
F q -points, then for any n < n' — g and any a — 2g — 1, . ..,%■ + g — 1 there 
is an [n, k, d] q -code C with 

k = n — a + g — 1, (4) 
d>a-2g + 2, (5) 
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such that C D for some w G [F*^ 

Moreover, if q is a power of 2, there is such a code with C D C^. 

Applying, as usual, this theorem to asymptotically good families of curves 
over F q , q being a square, such that 



9(X) 
we get 

Corollary 2 Let q be an even power of a prime. Then for any 

there exist families of codes with asymptotic parameters 

2 

5 > a , 8 

with the auxiliary property C D for some w G (F*^J . 

If q is an even power of 2, there exist such codes with a stronger property 
C^C ± . 



To construct quantum codes we need a somewhat stronger statement. 
Recall that we need a triple C D C D C ± . 

If we take two divisors V < V then C L (X, V, V) C C L (X, V, V) and we 
have the opposite inclusion for duals. The differential form uj with the above 
properties, good for D is also good for T>' . Taking T> = aPo and T>' = a'Po 
with a' < a we prove the following 

Corollary 3 Let q = 2 2m . Then for any pair of real numbers (a', a) such 
that 2m 2 __ 2 < a' < a < \ + 2 J_ 2 there exist families of triples of2 2m -ary codes 
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C'dC^ C with asymptotic parameters 

R' = l- a ' + — - — , (9) 
2 m - 2 

5'>a' — , (10) 

— 2 m 2 

R=l- a + _ (11) 

2 m 2 

<5>« — . (12) 

— 2 m 2 

i/ere R' signifies the asymptotic rate of codes C , and R and 5 are asymptotic 
parameters of codes C . 

Remark Choosing an F g -point P^ and taking Supp£ = Supp£> = SuppZ>' = 
Pq and V = X (F q ) \ Pq we see that the above codes are polynomially 
constructible. This uses, of course, a difficult theorem of Vladut;, see 







5 Summing up: quantum codes 

We say that a quantum code can be constructed in polynomial time if there 
exists a polynomial time algorithm constructing explicitly an encoder of the 
code and this encoder has polynomially many elementary quantum gates. 

In |7j it is in fact shown that knowledge of the generator matrix of the 
symplectic code F (also called generating operators of the stabilizer group of 
Qf) suffices to construct a polynomial complexity encoder. Moreover this en- 
coder construction is, roughly speaking, a sequence of Gaussian eliminations 
of k x n matrices and hence it has polynomial complexity. Any generator ma- 
trix of the code C 1 - could be used to construct a set of generator operators 



of S polynomially. Finally, it is shown in ||13|| , |21f that generator matri- 
ces of algebraic geometry codes described in Section f| can be constructed 
in polynomial time. Thus the associated quantum stabilizer codes are also 
constructible in polynomial time. 

To construct an asymptotically good quantum code Q we start with a 
family of curves X over F 2 2m with 1 4^ — > 2 m — 1. Each curve gives us a 

triple C D C D C 1 - of algebraic geometry codes C over F 2 2m as described 
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in Section |j. Let C be an [n, k, d]-code and C an [n, k', d']-code. Binary 
expansions of C and C with respect to a self-orthogonal basis give us a triple 
D' D D D D 1 - of binary codes with no' = no = 2mn,k£,i = 2mk',k£> = 
2mk,d D > > d',d D > d, cf. Section [3|. These codes give us symplectic codes 
F, their parameters being [2mn,2m(k + k'),> min{d, In their turn 

these give us quantum stabilizer [[2mn, 2m(k + k' — n), > min{d, |cf }]]-codes 
Q. The corresponding asymptotic parameters are 

R Q = R + R'-l (13) 
5 Q > min{5,^'} (14) 

where R, R', 5 and 5' are the parameters of algebraic geometry F 2 2m-ary 
codes. 

It is time to use Corollary |3|. Put a' = |(a + 7), where 7 = 2m 1 _ 2 (this 
choice of a' is optimal here). The restrictions 27<a / <o;< 2 - + 7 are equal 
to 27 < a < I + 7. The asymptotic parameters of the algebraic geometry 
codes are 

R=l- a + j, (15) 
5>a-2j, (16) 

# = i-H a + i 7) (17) 

5'>~a-~ 7 . (18) 

Their binary expansions have the same R and i?', and the estimates for their 
S and 5' are divided by 2m. By Corollary p] the parameters of the quantum 
codes obtained are 

R Q = R + R'-l = l + ^-^a, (19) 
5 Q >^-(a-2j). (20) 

Therefore, for any m > 3 we get a polynomial bound 

2 10 

= 1 " 2rn~2 ~ (21) 
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with the restriction 



1 /l 



2m \2 2 m -2 



(22) 



i.e., 



2 1 1 1 

1 - > Ro> ---- 



6 3 2 r 



(23) 



Theorem [I] now follows from fl2~T|) and (^) by direct computation. 
On Fig.l we present the Gilbert- Varshamov type bound (|3|) and the poly- 
nomial bound of Theorem 1 based on (^Tj) and (|2"3"D. 




6 0.02 0.04 0.06 



.1 0.12 0.14 0.16 0.18 



IQ 



Figure 1: Non-constructive bound (^|) and polynomial bound of Theorem 1 
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